In recent years, iGaming platforms have become prime targets for cybercriminals. With billions of dollars in transactions occurring every day, iGaming companies face a barrage of threats, from fraudulent schemes and account takeovers to large-scale data breaches.
According to TransUnion’s 2024 State of Omnichannel Fraud Report, the iGaming industry experienced the highest rate of suspected digital fraud in the US in 2023, with nearly 11% of transactions flagged as potentially fraudulent.
Online poker, casino gaming, and sports betting had a suspected fraud attempt rate of 10.9%—significantly higher than the retail sector (6.1%) and video gaming (5.5%).
This is not a new trend. In 2022, iGaming was also the most targeted industry, with 10% of transactions suspected of digital fraud. The rapid rise of online betting, particularly during high-traffic periods makes these platforms lucrative targets for scammers.
As Kevin Gosschalk, CEO of cybersecurity firm Arkose Labs, explains, “We’re in March Madness, so it’s peak season for scams, fake websites, and fake apps being set up to lure you to put money into them, claiming you’re going to win big. And then of course, it’s a rug pull—there’s no money to be gained.”
To combat these threats, leading iGaming companies are implementing advanced cybersecurity measures. Below, we explore three major upgrades that aim to fortify the industry’s digital defenses.
ACR Poker bans virtual machines and screen sharing tools
Concerns over security and fair play in online poker remain high. According to the 2024 State of Poker Survey, which polled nearly 1,000 US players, one-third of respondents expressed concerns about online poker security.
Among them, 24% cited bots and cheating as their primary worries. To allay these fears, trusted online poker provider ACR Poker introduced strict new policies prohibiting virtual machines and real-time screen-sharing tools.
While sometimes used for legitimate purposes, these tools have been exploited by players to collaborate unfairly during games and tournaments.
Under the new policy, players caught violating these rules will receive a warning for a first offense. Repeat offenders face account suspension, permanent bans, and possible fund confiscation. This measure aims to close potential loopholes that cheaters exploit to gain an unfair edge.
Internet Vikings enhance DDoS protection
Distributed Denial-of-Service (DDoS) attacks have become an increasingly severe problem for online gambling platforms.
In November 2024, International Game Technology (IGT), a major provider of slot machines and gambling technology, was forced to take its systems offline due to a cyberattack.
This incident followed a string of high-profile attacks on casino giants like MGM Resorts and Caesars Entertainment, underscoring the vulnerability of the industry.
To mitigate such risks, Internet Vikings, a premier supplier of licensed in-state cloud hosting for sports betting and iGaming, has strengthened its defenses through a partnership with Cloudflare.
By leveraging Cloudflare’s Magic Transit, Internet Vikings can anticipate and neutralize DDoS attacks before they disrupt services.
PokerStars’ third-party identity protection services
Another major cybersecurity issue facing the iGaming industry is data breaches. In late 2023, PokerStars began notifying customers whose personal data may have been compromised in the MOVEit Transfer attacks, a high-profile cyber incident linked to the Cl0p ransomware cartel.
The MOVEit zero-day vulnerability allowed hackers to infiltrate MOVEit Transfer servers, which various companies, including PokerStars, used for data storage and sharing.
In response to the attack, PokerStars implemented several security measures to protect its customers. These included disabling access to the compromised MOVEit Transfer system and hiring external forensic cybersecurity experts to investigate the breach.
Notably, the platform also offered affected customers third-party identity protection services for 24 months. Such services help users monitor their personal and financial data for suspicious activity and provide resources to help address identity theft.
Protecting yourself against iGaming cyber threats
While iGaming companies continuously upgrade their cybersecurity measures, individual players also play a crucial role in protecting themselves from online threats.
A simple yet effective step is to secure your home network. Start by setting strong, unique passwords for your router and Wi-Fi network. Make sure that it’s not easily guessable and is at least 12 characters or longer.
Additionally, as Kevin Gosschalk advises, “If you’re intending to gamble, go with the well-known sports websites, the ones that you see on TV, the ones that you see advertising in media. Those are most likely to be legitimate websites.”
Be wary of platforms that offer unusually high bonuses, guarantee winnings, or operate exclusively with cryptocurrency.
As cyber threats against the iGaming industry continue to rise, companies are stepping up their defenses with enhanced security measures.
From ACR Poker’s ban on virtual machines to Internet Vikings’ improved DDoS protection and PokerStars’ response to data breaches, these initiatives reflect a broader effort to secure the digital gambling landscape. For more cybersecurity guides and technology articles like this, visit the Internet Health Test website.